ABOUT YOU SE & Co. KG

Oct 22, 2026

Junior Application Security Engineer (all genders)

Germany

Hamburg, Germany

JavaScriptPythonAWSGCPKubernetesPHPGo

Automatic translation. Check the original.

Company Description

ABOUT YOU is one of the fastest-growing e-commerce companies in Europe. With locations in Hamburg and Berlin, we bring fashion and technology together. Our mission is to rethink online shopping and make it more personal. This requires more than just good ideas; it requires people who show initiative and challenge the status quo. We rely on flat hierarchies, direct communication, and pragmatic decisions. There are no long coordination processes here. We work with dedication while also making sure to enjoy our time together, whether at team lunches, after-work drinks, company events, or a quick coffee between meetings.

Job Description

We are looking for a Junior Application Security Engineer (all genders) to strengthen our Application Security team within the IT Security unit, which is dedicated to protecting our online shop, our corporate systems, and our customers.

In this role, you will proactively target internal systems (pentesting/ethical hacking) as well as plan and implement security measures to protect our infrastructure, applications, and data. You will work closely with other security engineers, developers, and IT teams to ensure security best practices, automate security processes, and respond to new threats. The position includes the following tasks:

A place where you can be yourself.

We see it as our responsibility to create an environment where everyone can feel as welcome as they are.

Different backgrounds and perspectives make us stronger and shape our culture.

What we stand for internally, we also stand for as a brand: acceptance, inclusion, and a fairer approach to fashion.

Conducting regular penetration tests and code reviews

Consulting on the setup and maintenance of applications and infrastructure (typically hosted in AWS/Kubernetes)

Triage and remediation/tracking of monitoring events

Optimization and automation of security testing processes. This may also include building attack infrastructure, writing Python scripts, and implementing security scans in GitLab CI

Contributing to incident response activities in the SOC, including occasional 24/7 on-call duty

Qualifications

At least one year of experience in application security

Ability to perform active application security assessments and penetration tests

Nice to have

Development and scripting in Python (required; PHP, JavaScript or Go preferred)

Architecting secure systems using threat modeling and security engineering practices

Conducting secure code reviews across various cloud environments (AWS/GCP preferred; Azure is a plus)

Conducting red teaming operations and offensive security strategies

Certifications: e.g., OSCP, OSWP, etc.

Knowledge of Laravel / PHP

Ability to read and understand JavaScript

Ability to read and understand Go

Experience with incident response activities

Experience with Web Application Firewalls (WAF) and CDN providers (e.g., Cloudflare, Akamai)

Experience with GitLab CI/CD pipelines

Additional Information

Your benefits at a glance: Visit our benefits page.

Simply apply online via our career page - we will get back to you with feedback as soon as possible!

Compensation: EUR 50000 - EUR 62000 - annually

Languages

Junior Application Security Engineer (all genders)

Company Description

Job Description

Qualifications

Nice to have

Additional Information

Show your skills.Get discovered.

More opportunities with one profile

Keep exploring

Staff Full-Stack Engineer (w/m/d)

Senior Pre-Sales Solutions Engineer

IT System Integrator (m/f/d)